To ensure the business risk management framework is effectively applied to technology and information systems and to oversee business continuity, security and quality To plan, execute, and manage multi-faceted projects related to risk management, mitigation and response, compliance, control assurance, and user awareness To oversee security strategies, policies/standards, ensuring the effectiveness of solutions, and providing security-focused consultative services to the business

• Manage expenditure planning and reporting within approved budget parameters
• Anticipate and meet the needs of clients and commit to continuous development and entrenchment of a customer service culture
• Establish mutually beneficial relationships with stakeholders that support thought leadership, innovative and integrated practice solutions
• Provide subject matter expertise and thought leadership
• Manage risk including identification, analysis and evaluation of risks across the business and oversee implementation of appropriate control measures to modify the risk
• Oversee the monitoring and reviewing of risk performance
• Recommend and ensure implementation of required changes to IT risk and security policies and procedures
• Provide tactical direction and consultation on IT risk and compliance, contribute to IT risk reports, and review and assess quality and accuracy of IT reports
• Provide guidance on IT continuity and disaster recovery design and implementation for business disaster recovery
• management programmes
• Provide input into the development and maintenance of the risk framework (a single view of the business’ risk profiles and tolerance)
• Keep abreast of current threats and stay current with IT evolution
• Oversee the planning, execution, and management of multi-faceted projects related to compliance, control assurance, risk management, security and infrastructure
• Serve in an advisory role in application development and infrastructure projects to assess risks
• Monitor IT incident and response management
• Drive IT Risk awareness training programs
• Monitor implementation and effectiveness of security outputs
• Liaise with Audit (Internal and External)
• Conduct contract reviews
• Collaborate with Operational Risk
• Assist with ensuring the accuracy of the IT Asset Register and CMDB
• Participate in planned activities that are appropriate for own and employee development
• Develop, encourage and nurture collaborative relationships within FNB and/or across the Group
• Manage people by executing management responsibilities and create an environment that encourages employee growth and performance excellence
• Actively coach the team through providing advice about subject matter, solutions, principles and processes, and personal progression with the aim to improve performance

• BB_C - C | Professionally qualified and experienced specialists and middle management (Broad Band)
• CFI_N - (Client Facing Indicator-South Africa)
• CT_VP_I - Vice President I (Corporate Title)
• FAIS_N - (FAIS Indicator)
• ITC_Y - In accordance with National Credit Act (NCA) candidates applying for this role will require a credit record check. (ITC Indicator-South Africa)
• OFO_252901 - ICT Security Specialist_Professionals (OFO Code)
• Leadership experience

• Challenging Work.
• Opportunities to network and collaborate with stakeholders at all levels of the organisation.
• Opportunities to engage with subject matter experts to enhance and develop your skill set.
• Opportunities to innovate and use data analytics.

• Curious & courageous - you're driven by always wanting to know more and learn more and you're brave enough to.
• Obsessed with mastery - you know what it takes to become good at what you do and are constantly pushing yourself to do it.

09/10/24